The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

vim is vulnerable to Heap-based Buffer Overflow

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

vim is vulnerable to Use After Free

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor